A hacker sitting in front of some screens is about to launch another attack using the data from a previous password leak.

Password Check: How secure is my password? And how can I test it?

Password leaks have increased dramatically. This makes many people wonder if their chosen password is still secure.

Oct 28, 20243 min readTagsCredential-StuffingPassword

Attention! Hackers have struck again!

It is the largest password leak in history and now the third record-breaking dump of private and sensitive data records published in 2024. The list so far:

Responsible for the latest publication was a user acting under the pseudonym “ObamaCare”, who had previously published the employee database of a law firm and student applications of a College in Burlington County.

An examination of the published passwords revealed that they were a mixture of old and new records of real passwords used by users around the world.

The consequences of this publication are very likely to be increased attacks on user accounts using this new leaked password data. Hacker methods such as credential stuffing will be used.

ACTION REQUIRED: Check your passwords now and make sure they are not part of a password leak. Below you can find out how to do this easily and conveniently on our website. You can also find out whether you are using a strong password or whether you should change it.

How do I test whether I am using a leaked password?

You can check whether a password is already known and should therefore be changed with just a few clicks. Respective tools use “password databases” that contain compromised passwords and check whether the password used by the user has already been published.

It is important that a password entered by the user is NEVER stored in plain text or transmitted to the server. In the Engity demo, our tool only generates a hash value using the password entered and compares this with the hashes from the leaked databases.

To check whether your password is already a leaked password, click on the “Signup” button in the Engity demo tool.

Start screen of the Engity demo with buttons for sign-up, login and for an advanced view.

In the following window you only have to enter the password you want to test (the e-mail address is not necessary for this test, nor is the repeated entry of the password).

If the password has actually been part of a data breach, this will be displayed with a corresponding message, otherwise there will be no message.

Sign-up screen of the Engity demo with a message that the entered password is not secure enough and is already classified as leaked.

However, Engity's tool not only allows you to check whether a password has already been leaked. The password strength, the so-called password security, is also assessed. This allows you to see at a glance whether the selected password meets the current security requirements.

Have fun testing!